Re:What's the deal with all those weird wrong-number texts?
by aaronwalker on Friday July 01, 2022 @05:52PM
(#31953481)
Hmm. Makes me wonder about the security of two factor authentication schemes. For scams like these it's pretty obvious that someone is trying to access your account, but I do wonder if there are more secure ways to verify your identity when changing account settings.
[ Parent
| on HN ]
Re:What's the deal with all those weird wrong-number texts?
by tialaramex on Friday July 01, 2022 @06:26PM
(#31953824)
It will depend on the authentication strategy. For WebAuthn it isn't a problem, short of sending you their physical authenticator (e.g. their Yubikey, or their iPhone) they can't help you sign in as them even if they wanted to, so this makes it very hard to fool ordinary users into helping crooks.